Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-41657

AUMA: Incorrect delivery status of the Bluetooth configuration

Description

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Auma AC1.2

Default version status: unaffected

  • 01.01.2024 to < 09.05.2025affected

Auma PROFOX

Default version status: unaffected

  • 01.01.2024 to < 09.05.2025affected

References